Advertisement
h3ll0s

Upload Multiple Files With a Single File Element

Jul 30th, 2012
429
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. # Title : Upload Multiple Files With a Single File Element
  2. # Download : http://the-stickman.com/files/multiple-file-element.zip
  3. # Date : 28 July 2012
  4. # Author : h3ll0s
  5. # Home : http://www.facebook.com/groups/3rr0rc0de/
  6. # Dork : Think it :p
  7. # Greatz : Gato Lucy, Starkey, Cimay, phiA, haning32.dll
  8. # Big Thank's : 3rr0r c0de | PasuruanCyber
  9. BinusHacker
  10. r00tw0rm
  11. # email : 3rc0.official@gmail.com
  12. # Tested : Debian Lenny
  13.  
  14. -=-=-=-=-=-=-=-
  15. Description
  16.  
  17. You can upload an attachment file on the server,
  18. example jpg, png, gif.
  19. used tamper data to change the shell.php
  20.  
  21. =-=-=-=-=-=-=-=
  22. Vulnerable Code
  23.  
  24. (move_uploaded_file($_FILES['file']['tmp_name'][$i], $destination . '/' .$nm_file)) {
  25. echo $_FILES['file']['name'][$i] . " uploaded sucessfully!<br>";
  26. $attach .= '<br/><a href="attachment/'. $nm_file .'" >'.$nm_file.'</a>';
  27. }
  28.  
  29. -=-=-=-=-=-=-=-
  30. Destination
  31.  
  32. You can preview your shell at folder /attacement/yourshell
  33.  
  34. # Demo Shell :
  35. http://tts-lpse.lkpp.go.id/tts/attachment/181061011404_V1.jpg.php
  36. http://tts-lpse.lkpp.go.id/tts2/tes_.php
  37.  
  38. Press TAB Keyboard, you can found login shell.
  39. password shell : ask me #LOL
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement